AMENDMENTS TO THE CLAIMS 

1-18. (Canceled) 



19. (Currently Amended) A password recovery system for re-supplying a password to a 
user who has forgotten the password, said password recovery system comprising: 
a communication terminal device; and 

a portable password recording medium having the password recorded thereon and being 
coupled to said communication terminal device, 

wherein said communication terminal device comprises: 

a first receiving unit operable to receive, from an external communication 
terminal device, a signed data set generated with use of a secret key belonging to a guarantor who 
guarantees legitimacy of the user by digitally signing information for id e ntifying a s e nd e r with 
us e of a s e cr e t k e y ; and 

an outputting unit operable to output the signed data set received by said first 
receiving unit to said password recording medium, and 

wherein said password recording medium comprises: 

a public key storing unit for storing therein a public key that corresponds to the 
g e n e rat e d with use of th e secret key; 

a password storing unit for storing the password therein; 
a second receiving unit operable to receive the signed data set output by said 
outputting unit; 
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an authentication unit operable to read the public key from said public key storing 
unit and perform signature authentication using the read public key and the signed data set 
received by said second receiving unit se-as-to judge whether i £the signed data set received by 
said second receiving unit has been signed by the guarantor g e n e rated by th e s e nd e r ; and 

a reading unit operable, when said authentication unit judges that the signed data 
set received by said second receiving unit has been signed by the guarantor g e n e rated by th e 
sender, to read the password from said password storing unit. 

20, (Currently Amended) The password recovery system of claim 19, 

wherein said password recording medium further comprises an expiration period storing 
unit for storing therein an expiration period for receiving the signed data set, 

wherein the signed data set received by said second receiving unit has date/time 
information attached thereto, the date/time information indicating a date and time at which the 
signed data set has been generated, 

wherein said authentication unit performs the signature authentication so as to judge if the 
signed data set received by said second receiving unit has been signed by the guarantor g e n e rat e d 
by th e s e nd e r , and judges if the date/time information attached to the signed data set is within the 
expiration period stored in said expiration period storing unit, and 

wherein said reading unit reads the password from said password storing unit if said 
authentication unit judges that the received signed data set has been signed by the guarantor 
g e nerat e d by th e s e nd e r and that the date/time information is within the expiration period. 
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21. (Currently Amended) The password recovery system of claim 19, 

wherein said password recording medium further comprises a signed data set number 
storing unit for storing therein a predetermined number indicating an amount of signed data sets 
that are required for performing a password recovery, and 

wherein said reading unit counts the received signed data set as a valid signed data set for 
performing the password recovery when said authentication unit judges that the signed data set 
received by said second receiving unit has been signed by the guarantor g e n e rat e d by th e s e nd e r , 
and reads the password from said password storing unit when the amount of valid signed data 
sets has reached the predetermined number stored in said signed data set number storing unit. 

22. (Currently Amended) A communication terminal device for re-supplying a 
password to a user who has forgotten the password, said communication terminal comprising: 

a public key storing unit for storing therein a public key that corresponds to a secret key 
belonging to a guarantor who guarantees legitimacy of the user g e n e rat e d with us e of a s e cr e t 

a password storing unit for storing the password therein; 

a receiving unit operable to receive, from an external communication terminal device, a 
signed data set generated by digitally signing information for id e ntifying a s e nd e r with use of the 
[[a]] secret key; 

an authentication unit operable to read the public key from said public key storing unit 
and perform signature authentication using the read public key and the signed data set received 
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by said receiving unit se-as to judge whether i £the signed data set received by said receiving unit 
has been signed by the guarantor g e n e rat e d by th e s e nder ; and 

a reading unit operable, when said authentication unit judges that the signed data set 
received by said receiving unit has been signed by the guarantor g e n e rat e d by th e s e nder , to read 
the password from said password storing unit. 

23. (Currently Amended) The communication terminal device of claim 22, further 
comprising 

an expiration period storing unit for storing therein an expiration period for receiving the 
signed data set, 

wherein the signed data set received by said receiving unit has date/time information 
attached thereto, the date/time information indicating a date and time at which the signed data set 
has been generated, 

wherein said authentication unit performs the signature authentication so as to judge if the 
signed data set received by said receiving unit has been signed by the guarantor g e n e rat e d by th e 
s e nd e r , and judges if the date/time information attached to the signed data set is within the 
expiration period stored in the expiration period storing unit, and 

wherein said reading unit reads the password from said password storing unit if said 
authentication unit judges that the signed data set received by said receiving unit has been signed 
by the guarantor g e n e rat e d by th e s e nd e r and that the date/time information is within the 
expiration period. 
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24. (Currently Amended) The communication terminal device of claim 22, further 
comprising 

a signed data set number storing unit for storing therein a predetermined number 
indicating an amount of signed data sets that are required for performing a password recovery, 

wherein said reading unit counts the received signed data set as a valid signed data set for 
performing the password recovery when said authentication unit judges that the received signed 
data set has been signed by the guarantor g e n e rat e d by th e sender , and reads the password from 
said password storing unit when the amount of valid signed data sets has reached the 
predetermined number stored in said signed data set number storing unit. 

25. (Previously Presented) The communication terminal device of claim 22, further 
comprising 

a displaying unit operable to display the password read by said reading unit. 

26. (Previously Presented) The communication terminal device of claim 22, further 
comprising: 

an application storing unit for storing therein a piece of application software that 
corresponds to the password; and 

an application executing unit operable to execute the piece of application software, using 
the password read by said reading unit. 
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27. (Currently Amended) A password recording medium that is portable and operable 
to re-supply a password to a user who has forgotten the password, said password recording 
medium comprising: 

a public key storing unit for storing therein a public key that corresponds to a secret key 
belonging to a guarantor who guarantees legitimacy of the user g e n e rat e d with us e of a s e cr e t 

1Vt V 5 

a password storing unit for storing the password therein; 

a receiving unit operable to receive, from a communication terminal device to which said 
password recording medium is coupled, a signed data set generated by digitally signing 
information for id e ntifying a s e nd e r with use of th^[[a]] secret key; 

an authentication unit operable to read the public key from said public key storing unit 
and perform signature authentication using the read public key and the signed data set received 
by said receiving unit se-as to judge whether i£the signed data set received by said receiving unit 
has been signed by the guarantor g e nerat e d by th e s e nd e r ; and 

a reading unit operable, when said authentication unit judges that the signed data set 
received by said receiving unit has been signed by the guarantor g e nerat e d by th e send e r , to read 
the password from said password storing unit. 

28. (Currently Amended) The password recording medium of claim 27, further 
comprising 

an expiration period storing unit for storing therein an expiration period for receiving the 
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signed data set, 

wherein the signed data set received by said receiving unit has date/time information 
attached thereto, the date/time information indicating a date and time at which the signed data set 
has been generated, 

wherein said authentication unit performs the signature authentication so as to judge if the 
signed data set received by said receiving unit has been signed by the guarantor g e nerat e d by th e 
s e nd e r , and judges if the date/time information attached to the signed data set is within the 
expiration period stored in said expiration period storing unit, and 

wherein said reading unit reads the password from said password storing unit if said 
authentication unit judges that the signed data set received by said receiving unit has been signed 
by the guarantor g e n e rat e d by th e s e nd e r and that the date/time information is within the 
expiration period. 

29. (Currently Amended) The password recording medium of Claim 27, further 
comprising 

a signed data set number storing unit for storing therein a predetermined number 
indicating an amount of signed data sets required for performing a password recovery, 

wherein said reading unit counts the received signed data set as a valid signed data set for 
performing the password recovery when said authentication unit judges that the received signed 
data set has been signed by the guarantor g e n e rat e d by th e s e nd e r , and reads the password from 
said password storing unit when the amount of valid signed data sets has reached the 



8 



predetermined number stored in said signed data set number storing unit. 

30. (Previously Presented) The password recording medium of claim 27, further 
comprising 

an outputting unit operable to output the password read by said reading unit to the 
communication terminal device. 

31. (Previously Presented) The password recording medium of claim 27, further 
comprising: 

an application storing unit for storing therein a piece of application software that 
corresponds to the password; and 

an application executing unit operable to execute the piece of application software, using 
the password read by said reading unit. 

32. (Currently Amended) A password recovery method to be used by a password 
recording medium that is portable and operable to re-supply a password to a user who has 
forgotten the password, 

the password recording medium comprising: 

a public key storing unit for storing therein a public key that corresponds to a secret key 
belonging to a guarantor who guarantees legitimacy of the user g e n e rat e d with us e of a s e cr e t 
key; and 
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a password storing unit for storing the password therein, and 
the password recovery method comprising: 

a receiving step of receiving a signed data set generated by digitally signing information 
for id e ntifying a s e nd e r with use of the [[a]] secret key; 

an authentication step of reading the public key from the public key storing unit and 
performing signature authentication using the read public key and the signed data set se^as to 
judge whether if-the received signed data set has been signed by the Ruarantor g e n e rat e d by th e 
s e nd e r ; and 

a reading step of, when the authentication step judges that the signed data set has been 
signed by the guarantor g e nerat e d by th e s e nd e r , reading the password from the password storing 
unit. 

33. (Currently Amended) A computer-readable storage medium on which a password 
recovery program is recorded for execution within a computer, the password recovery program 
being used by a password recording medium that is portable and operable to perform a password 
recovery method of re-supplying a password to a user who has forgotten the password, 

the password recording medium comprising: 

a public key storing unit for storing therein a public key that corresponds to a secret key 
belonging to a guarantor who guarantees legitimacy of the user g e n e rat e d with us e of a s e cr e t 
key; and 

a password storing unit for storing the password therein, and 
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the password recovery method comprising: 

a receiving step of receiving a signed data set generated by digitally signing information 
for id e ntifying a s e nder with use of the_[[a]] secret key; 

an authentication step of reading the public key from the public key storing unit and 
performing signature authentication using the read public key and the signed data set se-as to 
judge whether if-the received signed data set has been signed by the guarantor g e n e rat e d by the 
s e nder ; and 

a reading step of, when the authentication step judges that the signed data set has been 
signed by the guarantor g en e rat e d by th e s e nder , reading the password from the password storing 
unit. 



11 



